In short
PayPal says genuine messages address you by the full name on your PayPal account, and that passwords and verification codes should never be shared with anyone, not even someone claiming to be PayPal customer service. It advises never giving personal, card or account details by email, text or phone.
Most common fake: Emails with generic greetings such as Dear user or Hello PayPal member.
Safest check: Open the PayPal app or type www.paypal.com into a new browser window and log in to see any real alerts.
What PayPal says
PayPal says genuine messages address you by the full name on your PayPal account, and that passwords and verification codes should never be shared with anyone, not even someone claiming to be PayPal customer service. It advises never giving personal, card or account details by email, text or phone. Source: PayPal
Common fake PayPal messages
- Emails with generic greetings such as Dear user or Hello PayPal member
- Urgent warnings that your account will be limited unless you act immediately
- Links asking you to log in or verify your account on a look alike website
- Unexpected attachments that may contain malware
- Phone calls with a faked caller ID asking for codes or account details
PayPal's real web addresses
Genuine PayPal links and emails use these domains. Look at the part just before the first single slash: paypal.com is real, but paypal-support-center.com or paypal.com.account-check.top are not.
- paypal.com
Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.
How to check a PayPal message safely
- Open the PayPal app or type www.paypal.com into a new browser window and log in to see any real alerts
- Check the greeting, as genuine PayPal messages use the full name on your account
- Look for the PayPal logo with a checkmark next to the message in supported email inboxes
- Contact PayPal only through the Contact page in the PayPal Help Center
How to report a fake PayPal message
- Forward the whole suspicious email, or a suspicious text message, to phishing@paypal.com, then delete it. Official details on paypal.com
Also report it to the official fraud service in your country. See the worldwide list.
If you clicked, paid or shared details
Act quickly. It makes a difference.
- If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
- If you entered a password, change it on the real PayPal website or app and turn on two-step verification.
- Expect follow-up calls or messages pretending to help. Never share one-time codes or move money to a "safe account".
- Report the scam, then delete the message.
More help: Phishing links and fake login pages and what to do after a scam.
Questions people ask
Does PayPal send messages asking for payment or personal details?
PayPal says genuine messages address you by the full name on your PayPal account, and that passwords and verification codes should never be shared with anyone, not even someone claiming to be PayPal customer service. It advises never giving personal, card or account details by email, text or phone.
How can I check if a PayPal message is real?
Open the PayPal app or type www.paypal.com into a new browser window and log in to see any real alerts. Check the greeting, as genuine PayPal messages use the full name on your account. Look for the PayPal logo with a checkmark next to the message in supported email inboxes. Contact PayPal only through the Contact page in the PayPal Help Center.
How do I report a fake PayPal message?
Forward the whole suspicious email, or a suspicious text message, to phishing@paypal.com, then delete it.
I clicked a link in a fake PayPal message. What should I do?
Don't enter anything else. If you typed card or bank details, call your bank now using the number on your card. If you entered a password, change it on the real website and turn on two-step verification. Then report the message and delete it.
Official sources and further reading
We check our pages against official advice from the organisations themselves and from government agencies.
- Report suspicious messages (PayPal)
- Learn about fake messages (PayPal)